Skip to content

Microsoft 365 security self-assessment

Microsoft 365 Security Self-Assessment Calculator

No login or Microsoft access. 12 core questions across 7 risk areas — deeper only where answers look weak.

  • No login
  • No admin consent
  • Free
  • 12–18 questions
Question 1 of 120%
Control area 1 of 7
Identity & Access

Is strong MFA truly enforced for every privileged account?

Think Global Admin, Exchange Admin, Intune Admin, and similar privileged roles.

FAQ

About this assessment

Identity, mail, endpoint, sharing, app trust, monitoring and evidence across Microsoft 365.

Use the matrix: weak control, concern, first fix.

Yes — Auditex on GitHub.